You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/data-factory/enable-aad-authentication-azure-ssis-ir.md
+17-17Lines changed: 17 additions & 17 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -70,38 +70,38 @@ You can use an existing Azure AD group or create a new one using Azure AD PowerS
70
70
71
71
You can [Configure and manage Azure AD authentication with SQL](https://docs.microsoft.com/azure/sql-database/sql-database-aad-authentication-configure) using the following steps:
72
72
73
-
1. In Azure portal, select**All services** -> **SQL servers**from the left-hand navigation.
73
+
1. In Azure portal, select**All services** -> **SQL servers**from the left-hand navigation.
74
74
75
75
2. Select your Azure SQL Database server to be configured with Azure AD authentication.
76
76
77
-
3. In the**Settings**section of the blade, select**Active Directory admin**.
77
+
3. In the**Settings**section of the blade, select**Active Directory admin**.
78
78
79
-
4. In the command bar, select**Set admin**.
79
+
4. In the command bar, select**Set admin**.
80
80
81
-
5. Select an Azure AD user account to be made administrator of the server, and then select**Select.**
81
+
5. Select an Azure AD user account to be made administrator of the server, and then select**Select.**
82
82
83
-
6. In the command bar, select**Save.**
83
+
6. In the command bar, select**Save.**
84
84
85
85
### Create a contained user in Azure SQL Database server representing the Azure AD group
86
86
87
87
For this next step, you need [Microsoft SQL Server Management Studio](https://docs.microsoft.com/sql/ssms/download-sql-server-management-studio-ssms) (SSMS).
88
88
89
89
1. Start SSMS.
90
90
91
-
2. In the**Connect to Server**dialog, enter your Azure SQL Database server name in
92
-
the**Server name**field.
91
+
2. In the**Connect to Server**dialog, enter your Azure SQL Database server name in
92
+
the**Server name**field.
93
93
94
-
3. In the**Authentication**field, select**Active Directory - Universal with MFA support** (you can also use the other two Active Directory authentication types, see [Configure and manage Azure AD authentication with SQL](https://docs.microsoft.com/azure/sql-database/sql-database-aad-authentication-configure)).
94
+
3. In the**Authentication**field, select**Active Directory - Universal with MFA support** (you can also use the other two Active Directory authentication types, see [Configure and manage Azure AD authentication with SQL](https://docs.microsoft.com/azure/sql-database/sql-database-aad-authentication-configure)).
95
95
96
-
4. In the**User name**field, enter the name of Azure AD account that you set as the server administrator, e.g. [email protected].
96
+
4. In the**User name**field, enter the name of Azure AD account that you set as the server administrator, e.g. [email protected].
97
97
98
-
5. select**Connect** and complete the sign-in process.
98
+
5. select**Connect** and complete the sign-in process.
99
99
100
-
6. In the**Object Explorer**, expand the**Databases** -> **System Databases** folder.
100
+
6. In the**Object Explorer**, expand the**Databases** -> **System Databases** folder.
101
101
102
-
7. Right-click on **master** database and select**New query**.
102
+
7. Right-click on **master** database and select**New query**.
103
103
104
-
8. In the query window, enter the following T-SQL command, and select**Execute**on the toolbar.
104
+
8. In the query window, enter the following T-SQL command, and select**Execute**on the toolbar.
105
105
106
106
```sql
107
107
CREATE USER [SSISIrGroup] FROM EXTERNAL PROVIDER
@@ -117,9 +117,9 @@ For this next step, you need [Microsoft SQL Server Management Studio](https://d
117
117
118
118
The command should complete successfully, granting the contained user the ability to create a database (SSISDB).
119
119
120
-
10. If your SSISDB was created using SQL authentication and you want to switch to use Azure AD authentication for your Azure-SSIS IR to access it, right-click on **SSISDB** database and select**New query**.
120
+
10. If your SSISDB was created using SQL authentication and you want to switch to use Azure AD authentication for your Azure-SSIS IR to access it, right-click on **SSISDB** database and select**New query**.
121
121
122
-
11. In the query window, enter the following T-SQL command, and select**Execute**on the toolbar.
122
+
11. In the query window, enter the following T-SQL command, and select**Execute**on the toolbar.
123
123
124
124
```sql
125
125
CREATE USER [SSISIrGroup] FROM EXTERNAL PROVIDER
@@ -186,9 +186,9 @@ For this next step, you need [Microsoft SQL Server Management Studio](https://d
186
186
187
187
The command should complete successfully, granting the managed identity for your ADF the ability to create a database (SSISDB).
188
188
189
-
8. If your SSISDB was created using SQL authentication and you want to switch to use Azure AD authentication for your Azure-SSIS IR to access it, right-click on **SSISDB** database and select**New query**.
189
+
8. If your SSISDB was created using SQL authentication and you want to switch to use Azure AD authentication for your Azure-SSIS IR to access it, right-click on **SSISDB** database and select**New query**.
190
190
191
-
9. In the query window, enter the following T-SQL command, and select**Execute**on the toolbar.
191
+
9. In the query window, enter the following T-SQL command, and select**Execute**on the toolbar.
192
192
193
193
```sql
194
194
CREATE USER [{the managed identity name}] FOR LOGIN [{the managed identity name}] WITH DEFAULT_SCHEMA = dbo
0 commit comments